AWS eks documentation change
Summary
Modified CIDR requirement statement to include CGNAT ranges
Security assessment
The change updates network prerequisite language without referencing security vulnerabilities or security feature enhancements. Maintains existing security context.
Diff
diff --git a/eks/latest/userguide/hybrid-nodes-prereqs.md b/eks/latest/userguide/hybrid-nodes-prereqs.md index 613770638..ea8181c31 100644 --- a//eks/latest/userguide/hybrid-nodes-prereqs.md +++ b//eks/latest/userguide/hybrid-nodes-prereqs.md @@ -38 +38 @@ You must enable inbound network access from the Amazon EKS control plane to your -The Classless Inter-Domain Routing (CIDR) ranges you use for your on-premises node and pod networks must use IPv4 RFC-1918 address ranges. Your on-premises router must be configured with routes to your on-premises nodes and optionally pods. See [On-premises networking configuration](./hybrid-nodes-networking.html#hybrid-nodes-networking-on-prem) for more information on the on-premises network requirements, including the full list of required ports and protocols that must be enabled in your firewall and on-premises environment. +The Classless Inter-Domain Routing (CIDR) ranges you use for your on-premises node and pod networks must use IPv4 RFC-1918 or CGNAT address ranges. Your on-premises router must be configured with routes to your on-premises nodes and optionally pods. See [On-premises networking configuration](./hybrid-nodes-networking.html#hybrid-nodes-networking-on-prem) for more information on the on-premises network requirements, including the full list of required ports and protocols that must be enabled in your firewall and on-premises environment.